$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft File: TDScUcpZiQfVwHyx8khR_ASNrRo.mft (raw, json) Hash identifier: fVk/j+EZIy71rIbclypXrkE2XcRhJwwJ9MjmzLkr2CI= Subject key identifier: 6B:87:92:08:26:8D:E2:26:DB:39:B8:36:9B:DB:0B:8E:4B:A9:D4:D1 Authority key identifier: 4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A Certificate issuer: /CN=A9171A1B/serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Certificate serial: 07E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft Manifest number: 07C2 Signing time: Sun 20 Sep 2026 21:20:27 +0000 Manifest this update: Sun 20 Sep 2026 21:20:27 +0000 Manifest next update: Sun 27 Sep 2026 21:20:27 +0000 Files and hashes: 1: TDScUcpZiQfVwHyx8khR_ASNrRo.crl (hash: KfqeywnsCkgZPtPD+Y3jAAFHmJJ10bVW9jJihbvQIuE=) 2: 34CC285A5C6011EB80D50F0CC4F9AE02.roa (hash: y9iPf5uYx69ejY3kwl7gRifI2qQ+lUK4vj5z1o6EqvE=) 3: FDA3EFA45C6211EB91658215C4F9AE02.roa (hash: 2oVR2t5v2J8c0h/gxceBEyWV3OdTw+s6Iy45bTBQMQ0=) 4: 9F00C9325C6111EB9FAD600FC4F9AE02.roa (hash: AVHjOo/UrE4RIu/UGGKNS+wB7XI6SMjM5Z9Qu4YFYdc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 21:20:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2018 (0x7e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171A1B, serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Validity Not Before: Sep 20 21:20:27 2026 GMT Not After : Sep 27 21:20:27 2026 GMT Subject: CN=6ab04e1b-55b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:51:b2:07:62:6b:dd:63:22:14:41:09:85:35: b8:22:c9:f0:83:27:aa:7f:06:0a:76:56:57:c1:42: 81:0a:d7:bd:12:52:5c:6c:5b:f2:8a:ea:11:ec:8d: 66:28:3f:58:ac:8d:10:f9:9f:af:18:52:b4:05:e0: 09:b9:52:0d:5f:a2:71:46:58:e0:c5:c5:b6:62:91: e5:25:e2:80:5e:11:69:b0:c2:3b:5a:7a:4c:d2:e9: fd:20:09:1c:f2:df:2e:23:9c:dd:5d:3c:b9:34:9e: ec:93:27:82:48:a8:73:3b:46:20:f5:bc:92:01:79: 32:c1:29:1c:14:8d:0d:36:d0:32:38:d3:00:bc:f1: 0b:3b:26:82:c0:9e:4b:42:65:89:77:2c:2f:04:67: 36:1a:76:ed:28:cb:e2:06:9f:33:4d:37:4f:a9:43: d2:86:4f:df:88:6d:2c:4c:73:48:13:08:d9:d5:e5: d4:80:c2:d2:b4:44:79:4c:dc:1d:ec:56:b5:1c:46: 47:86:c9:9a:bb:18:b3:e8:77:c8:15:e1:b2:77:10: a2:1d:93:24:b6:17:44:a0:be:68:db:ee:d8:99:96: 3b:f3:37:39:c2:ca:99:f7:c3:1d:a8:c3:b4:54:f7: bd:9d:93:9c:48:0d:ce:5e:8a:81:e5:52:d3:29:32: 09:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:87:92:08:26:8D:E2:26:DB:39:B8:36:9B:DB:0B:8E:4B:A9:D4:D1 X509v3 Authority Key Identifier: keyid:4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:2e:97:76:3d:ce:88:30:da:23:36:fd:c6:fa:9e:14:da:e8: 14:bc:ea:6f:03:e3:79:f7:b2:78:92:06:55:c2:c1:65:3b:bb: 82:1f:a0:fa:48:37:63:51:bb:36:46:34:b5:7d:8f:a9:1e:f7: 04:08:9b:ba:f6:36:1a:42:f7:bd:17:e0:65:d1:be:54:30:d0: 77:db:93:d4:35:d4:ac:46:a7:7d:0f:67:8b:da:86:b1:12:2b: 31:fd:aa:e8:05:d0:23:f4:09:5f:fe:9c:2d:c5:11:2d:d3:9c: 51:2e:82:78:dc:c6:57:81:65:2f:9b:12:48:ee:7c:91:7f:e7: bc:7f:a1:b1:48:a4:8d:cd:ac:b4:27:c2:a0:8a:08:d8:25:80: 38:73:1a:6c:4b:e8:4b:40:e1:61:b6:96:39:48:69:9c:12:a2: 18:5d:9d:b1:c1:9d:5c:fe:ce:12:ca:16:3a:4d:8d:36:cb:e1: 18:9a:3a:82:dc:4f:c7:ff:9f:ac:f7:59:0b:c4:20:20:98:02: f9:1a:95:7b:15:61:2e:fc:c3:9c:82:e3:00:4e:72:f4:31:5b: d3:1c:39:16:8e:bf:29:52:81:3c:0d:23:00:3c:86:b8:3c:82: 42:0f:94:4a:66:9a:df:3c:cb:24:bb:48:e9:d4:43:61:ce:c9: 5c:5f:71:1d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFBMUIxMTAvBgNVBAUTKDRDMzQ5QzUxQ0E1OTg5MDdENUMwN0NCMUYyNDg1MUZD MDQ4REFEMUEwHhcNMjYwOTIwMjEyMDI3WhcNMjYwOTI3MjEyMDI3WjAYMRYwFAYD VQQDEw02YWIwNGUxYi01NWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjlGyB2Jr3WMiFEEJhTW4IsnwgyeqfwYKdlZXwUKBCte9ElJcbFvyiuoR7I1m KD9YrI0Q+Z+vGFK0BeAJuVINX6JxRljgxcW2YpHlJeKAXhFpsMI7WnpM0un9IAkc 8t8uI5zdXTy5NJ7skyeCSKhzO0Yg9bySAXkywSkcFI0NNtAyONMAvPELOyaCwJ5L QmWJdywvBGc2GnbtKMviBp8zTTdPqUPShk/fiG0sTHNIEwjZ1eXUgMLStER5TNwd 7Fa1HEZHhsmauxiz6HfIFeGydxCiHZMkthdEoL5o2+7YmZY78zc5wsqZ98MdqMO0 VPe9nZOcSA3OXoqB5VLTKTIJwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGuHkggm jeIm2zm4NpvbC45LqdTRMB8GA1UdIwQYMBaAFEw0nFHKWYkH1cB8sfJIUfwEja0a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUExQi9EQzU4Q0M1QTVD NDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlRZlZ3SHl4OGtoUl9BU05y Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REU2NVY3BaaVFmVndIeXg4a2hSX0FTTnJSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUExQi9EQzU4Q0M1QTVDNDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlR ZlZ3SHl4OGtoUl9BU05yUm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvS6Xdj3OiDDaIzb9xvqeFNroFLzqbwPjefeyeJIGVcLBZTu7gh+g+kg3Y1G7 NkY0tX2PqR73BAibuvY2GkL3vRfgZdG+VDDQd9uT1DXUrEanfQ9ni9qGsRIrMf2q 6AXQI/QJX/6cLcURLdOcUS6CeNzGV4FlL5sSSO58kX/nvH+hsUikjc2stCfCoIoI 2CWAOHMabEvoS0DhYbaWOUhpnBKiGF2dscGdXP7OEsoWOk2NNsvhGJo6gtxPx/+f rPdZC8QgIJgC+RqVexVhLvzDnILjAE5y9DFb0xw5Fo6/KVKBPA0jADyGuDyCQg+U Smaa3zzLJLtI6dRDYc7JXF9xHQ== -----END CERTIFICATE-----Generated at Mon Sep 21 14:50:28 2026 by rpki-client